{"id":3309512,"url":"https://alion.io/job/epam-systems-senior-security-testing-engineer","title":"Senior Security Testing Engineer","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"D","score":47,"open_postings":60,"ghost_share":0.867,"stale_share":0,"repost_share":0.1,"time_to_fill_p50_days":45,"computed_at":"2026-10-31T05:58:55Z"}},"role":"QA","role_family":"QA","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Riga, Latvia"],"countries":["LV"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":3600,"max":5500,"currency":"EUR","period":"month","gross":null,"usd_annual":73572},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CodeQL","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"Go","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false}],"status":"closed","first_seen_at":"2026-10-27T02:32:16Z","employer_posted_date":null,"last_verified_at":"2026-10-31T08:44:41Z","board_verified":false,"closed_at":"2026-10-31T08:44:41Z","days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Job Description\nWe are seeking a Senior Security Testing Engineer to perform security assessments, application security reviews, and penetration testing for SaaS services and on-prem solutions focused on DNS/DHCP protocols, while collaborating with development teams to strengthen secure coding practices and embed threat modeling throughout the software development lifecycle.\n\nThis position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas.\n\nPerform security assessments, application security reviews, and penetration testing for SaaS services and on-prem solutions focused around DNS/DHCP protocol\n\nCollaborate with development teams to enforce secure coding practices, guidelines, and standards\n\nEnsure integration of security requirements and threat modeling considerations into the software development lifecycle\n\nOffer guidance and support during security-related discussions and decision-making processes\n\nProvide guidance on secure design principles and assist in addressing security issues\n\nPlan, execute, and analyze application security testing, including penetration testing, vulnerability scanning, and code reviews\n\nInterpret penetration test results and recommend remediation measures based on identified threats\n\nDesign and implement effective security controls, such as access controls, authentication mechanisms, encryption, and secure communication protocols, together with development teams\n\nUtilize threat modeling outputs to guide security control selection and implementation\n\nStay up-to-date with emerging security threats, vulnerabilities, and best practices in application security and threat modeling\n\nEducate development teams on secure coding practices, common vulnerabilities, and security best practices\n\nConduct security training sessions and workshops to raise awareness of threat modeling concepts and foster a security-conscious culture\n\nRequirements\n\n5+ years of experience in vulnerability management and penetration testing\n\nKnowledge of application security principles, threat modeling methodologies, and best practices\n\nProficiency in secure coding practices, vulnerability assessment, and penetration testing methodologies\n\nSkills in Shell Scripts, Python, or Golang\n\nFamiliarity with cloud environments like AWS, GCP, and Azure, and technologies like Kubernetes and Containers\n\nFamiliarity with common web application vulnerabilities (e.g., OWASP Web/API Top 10) and corresponding mitigation techniques\n\nExperience with implementing and managing security testing tools and technologies, such as static analysis tools, dynamic application scanners, and penetration testing frameworks\n\nUnderstanding of secure software development lifecycle (SDLC) and ability to integrate security practices and threat modeling into agile development processes with SAST & DAST tools (Coverity, CodeQL, SonarQube, Contrast)\n\nKnowledge of authentication, authorization, and access control mechanisms, cryptographic algorithms, and secure network communication protocols\n\nFamiliarity with industry standards and frameworks such as ISO 27001, NIST, PCI DSS, and GDPR\n\nExcellent communication and collaboration skills, with the ability to effectively communicate technical concepts to non-technical stakeholders\n\nMS/M.tech or BS/B.tech in Computer Science or related field, or equivalent work experience required\n\nNice to have\n\nRelevant certifications (e.g CISSP, CSSLP, CEH, OSCP, OSWE)\n\nUnderstanding of cyber security frameworks like OWASP, SANS, NIST, CIS\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life\n\nHybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more","description_format":"text","description_chars":4705,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-27T02:43:38Z"},{"event":"close","at":"2026-10-28T08:41:15Z"},{"event":"reopen","at":"2026-10-29T02:41:15Z"},{"event":"close","at":"2026-10-31T08:44:41Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":73572,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-senior-security-testing-engineer","json_url":"https://alion.io/job/epam-systems-senior-security-testing-engineer.json","meta":{"generated_at":"2026-10-31T10:40:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16391,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-senior-security-testing-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-senior-security-testing-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-senior-security-testing-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-senior-security-testing-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-senior-security-testing-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3309512}},{"tool":"search_jobs","arguments":{"company":"epam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3309512},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}